CyFun - Security Research on CyFun

CVE-2025-32324: Android ActivityManagerShellCommand Authentication Bypass Leading to LaunchAnyWhere

Tue, 30 Sep 2025 06:30:05 +0000

Deep analysis of CVE-2025-32324, a critical authentication bypass vulnerability in Android’s ActivityManagerShellCommand that enables LaunchAnyWhere attacks through thread context manipulation.

eBPF JIT Compiler Internals: Understanding Constant Blinding Implementation

Tue, 03 Jun 2025 06:30:05 +0000

Deep dive into eBPF’s constant blinding mechanism - a security defense against JIT-spray attacks in the Linux kernel.

How Attackers Are Weaponizing OAuth to Silently Take Over Microsoft Outlook Accounts

Tue, 26 Nov 2024 06:30:05 +0000

Investigation into sophisticated OAuth phishing campaigns targeting Microsoft Outlook accounts that bypass traditional security controls.

Novel approach to tackle UAF Bugs in the Linux Kernel

Sun, 15 Sep 2024 06:30:05 +0000

Analysis of dedicated bucket allocators as a novel mitigation technique for use-after-free vulnerabilities in the Linux kernel.

Geoguessr Tips & Tricks

Mon, 03 Jan 2022 00:00:00 +0000

Geoguessr Tips & Tricks

Tenet

Mon, 14 Jun 2021 22:27:00 +0000

Tenet HackTheBox writeup

ScriptKiddie

Sun, 06 Jun 2021 15:15:00 +0000

ScriptKiddie HackTheBox writeup

Delivery

Sun, 30 May 2021 11:44:00 +0000

Delivery HackTheBox writeup

Ready

Sat, 15 May 2021 20:57:00 +0000

Ready HackTheBox writeup

Laboratory

Sun, 18 Apr 2021 19:47:00 +0000

Laboratory HackTheBox writeup

Passage

Mon, 08 Mar 2021 19:36:00 +0000

Passage HackTheBox writeup

Academy

Sun, 28 Feb 2021 22:31:00 +0000

Academy HackTheBox writeup

Jewel

Mon, 22 Feb 2021 19:49:00 +0000

Jewel HackTheBox writeup

Doctor

Mon, 15 Feb 2021 20:47:00 +0000

Doctor HackTheBox writeup

Omni

Sun, 31 Jan 2021 18:01:00 +0000

Omni HackTheBox writeup

Worker

Sun, 31 Jan 2021 17:50:00 +0000

Worker HackTheBox writeup

0day

Fri, 01 Jan 2021 00:00:00 +0000

0day TryHackMe writeup

About

Fri, 01 Jan 2021 00:00:00 +0000

About this category

This is an introductory page designed to help you get started with CTF.

You’ll discover the strategies, thought processes, writeups, and tactics you’ll need to excel in Capture the Flag tournaments in this category.

Active Directory Basics

Fri, 01 Jan 2021 00:00:00 +0000

Active Directory Basics TryHackMe writeup

Advent of Cyber

Fri, 01 Jan 2021 00:00:00 +0000

Advent of Cyber TryHackMe writeup

Advent of Cyber 2

Fri, 01 Jan 2021 00:00:00 +0000

Advent of Cyber 2 TryHackMe writeup

Adventure Time

Fri, 01 Jan 2021 00:00:00 +0000

Adventure Time TryHackMe writeup

Agent Sudo

Fri, 01 Jan 2021 00:00:00 +0000

Agent Sudo TryHackMe writeup

Alfred

Fri, 01 Jan 2021 00:00:00 +0000

Alfred TryHackMe writeup

Anonforce

Fri, 01 Jan 2021 00:00:00 +0000

Anonforce TryHackMe writeup

Anonymous

Fri, 01 Jan 2021 00:00:00 +0000

Anonymous TryHackMe writeup

Anonymous Playground

Fri, 01 Jan 2021 00:00:00 +0000

Anonymous Playground TryHackMe writeup

Anthem

Fri, 01 Jan 2021 00:00:00 +0000

Anthem TryHackMe writeup

Aster

Fri, 01 Jan 2021 00:00:00 +0000

Aster TryHackMe writeup

AttackerKB

Fri, 01 Jan 2021 00:00:00 +0000

AttackerKB TryHackMe writeup

Attacking ICS Plant 1

Fri, 01 Jan 2021 00:00:00 +0000

Attacking ICS Plant 1 TryHackMe writeup

Attacking Kerberos

Fri, 01 Jan 2021 00:00:00 +0000

Attacking Kerberos TryHackMe writeup

Attacktive Directory

Fri, 01 Jan 2021 00:00:00 +0000

Attacktive Directory TryHackMe writeup

Authenticate

Fri, 01 Jan 2021 00:00:00 +0000

Authenticate TryHackMe writeup

Avengers Blog

Fri, 01 Jan 2021 00:00:00 +0000

Avengers Blog TryHackMe writeup

Basic Malware RE

Fri, 01 Jan 2021 00:00:00 +0000

Basic Malware RE TryHackMe writeup

BasicPentesting

Fri, 01 Jan 2021 00:00:00 +0000

BasicPentesting TryHackMe writeup

Binex

Fri, 01 Jan 2021 00:00:00 +0000

Binex TryHackMe writeup

Biohazard

Fri, 01 Jan 2021 00:00:00 +0000

Biohazard TryHackMe writeup

Blog

Fri, 01 Jan 2021 00:00:00 +0000

Blog TryHackMe writeup

Blueprint

Fri, 01 Jan 2021 00:00:00 +0000

Blueprint TryHackMe writeup

Boiler CTF

Fri, 01 Jan 2021 00:00:00 +0000

Boiler CTF TryHackMe writeup

Bolt

Fri, 01 Jan 2021 00:00:00 +0000

Bolt TryHackMe writeup

Borderlands

Fri, 01 Jan 2021 00:00:00 +0000

Borderlands TryHackMe writeup

Bounty Hacker

Fri, 01 Jan 2021 00:00:00 +0000

Bounty Hacker TryHackMe writeup

Brainstorm

Fri, 01 Jan 2021 00:00:00 +0000

Brainstorm TryHackMe writeup

Break it

Fri, 01 Jan 2021 00:00:00 +0000

Break it TryHackMe writeup

Break Out The Cage

Fri, 01 Jan 2021 00:00:00 +0000

Break Out The Cage TryHackMe writeup

Brooklyn Nine Nine

Fri, 01 Jan 2021 00:00:00 +0000

Brooklyn Nine Nine TryHackMe writeup

Brute It

Fri, 01 Jan 2021 00:00:00 +0000

Brute It TryHackMe writeup

Buffer Overflow Prep

Fri, 01 Jan 2021 00:00:00 +0000

Buffer Overflow Prep TryHackMe writeup

Burp Suite

Fri, 01 Jan 2021 00:00:00 +0000

Burp Suite TryHackMe writeup

C4ptur3-th3-fl4g

Fri, 01 Jan 2021 00:00:00 +0000

C4ptur3-th3-fl4g TryHackMe writeup

Carpe Diem 1

Fri, 01 Jan 2021 00:00:00 +0000

Carpe Diem 1 TryHackMe writeup

CC Steganography

Fri, 01 Jan 2021 00:00:00 +0000

CC Steganography TryHackMe writeup

CherryBlossom

Fri, 01 Jan 2021 00:00:00 +0000

CherryBlossom TryHackMe writeup

Cicada-3301 Vol.1

Fri, 01 Jan 2021 00:00:00 +0000

Cicada-3301 Vol.1 TryHackMe writeup

CMesS

Fri, 01 Jan 2021 00:00:00 +0000

CMesS TryHackMe writeup

Common info collection technique

Fri, 01 Jan 2021 00:00:00 +0000

Introduction ⭐

>Who are these adversaries?

They may be competitors, criminals, spies, unhappy employees, terrorists, or troublemakers. They may be motivated by money, revenge, or political beliefs, to name a few.
There are numerous ways adversaries collect information. Some of the more common methods include social engineering, phishing, accidental disclosure, googling, and dumpster diving. These methods are described over the next few pages followed by some basic countermeasures.

Social engineering is a collection of techniques used to manipulate people into revealing sensitive or other critical information. Those who engage in social engineering rely on the humans’ natural tendency to trust. In fact, it’s often easier for an adversary to obtain information by simply asking the right questions than using technical hacking methods.
Social engineering is sometimes conducted by phone. The caller may pretend to be someone in a position of authority or a telephone or computer technician, gradually pulling information out of the targeted person. Often the adversary will call several employees and piece together enough information to launch an attack. Help desk employees are often targeted by an adversary because they’re trained to be friendly and provide information.
Social engineering can also occur through online social forums, at professional conferences, and at non-work social events, to name a few examples.
The first objective of an adversary attempting social engineering is to convince you that they are in fact a person that you can trust with critical information.

Phishing

Phishing scams may be the most common types of social engineering attacks used today. Most phishing scams demonstrate the following characteristics:

Common Linux Privesc

Fri, 01 Jan 2021 00:00:00 +0000

Common Linux Privesc TryHackMe writeup

ConvertMyVideo

Fri, 01 Jan 2021 00:00:00 +0000

ConvertMyVideo TryHackMe writeup

Crack the hash

Fri, 01 Jan 2021 00:00:00 +0000

Crack the hash TryHackMe writeup

Cross-site Scripting

Fri, 01 Jan 2021 00:00:00 +0000

Cross-site Scripting TryHackMe writeup

CTF collection Vol.1

Fri, 01 Jan 2021 00:00:00 +0000

CTF collection Vol.1 TryHackMe writeup

Cybersecurity practices and why they are important

Fri, 01 Jan 2021 00:00:00 +0000

Cybersecurity Practices

Incorporating cybersecurity practices into your daily life can prevent the disclosure of critical information (CI) to potential adversaries. If you’re thinking, “But I work in a control system environment; control systems don’t store CI,” then consider our definition of CI:

Information that if disclosed would have a negative impact on an organization. It includes not only trade secrets and technical specs, but also sensitive information such as the process used by systems(e.g., commands and access points), financial data, personnel records and medical information.

CySec Practices for ICS

Fri, 01 Jan 2021 00:00:00 +0000

Learning Objectives

As some of you may be aware, solid cybersecurity practices have a broad impact. It’s critical to include as many solid risk mitigation strategy as feasible into your daily routine. Cybersecurity methods are used in a variety of professions and situations, as well as in your personal life.

Focus on the few things like

Describe cybersecurity practices and why they are important.

Describe common information-collection techniques and how to protect yourself from them.

Daily Bugle

Fri, 01 Jan 2021 00:00:00 +0000

Daily Bugle TryHackMe writeup

Dav

Fri, 01 Jan 2021 00:00:00 +0000

Dav TryHackMe writeup

Daves Blog

Fri, 01 Jan 2021 00:00:00 +0000

Daves Blog TryHackMe writeup

Develpy

Fri, 01 Jan 2021 00:00:00 +0000

Develpy TryHackMe writeup

Dogcat

Fri, 01 Jan 2021 00:00:00 +0000

Dogcat TryHackMe writeup

Easy Peasy

Fri, 01 Jan 2021 00:00:00 +0000

Easy Peasy TryHackMe writeup

Empire

Fri, 01 Jan 2021 00:00:00 +0000

Empire TryHackMe writeup

Encryption - Crypto 101

Fri, 01 Jan 2021 00:00:00 +0000

Encryption - Crypto 101 TryHackMe writeup

Erit Securus I

Fri, 01 Jan 2021 00:00:00 +0000

Erit Securus I TryHackMe writeup

For Business Reasons

Fri, 01 Jan 2021 00:00:00 +0000

For Business Reasons TryHackMe writeup

Forensics

Fri, 01 Jan 2021 00:00:00 +0000

Forensics TryHackMe writeup

Game Zone

Fri, 01 Jan 2021 00:00:00 +0000

Game Zone TryHackMe writeup

GamingServer

Fri, 01 Jan 2021 00:00:00 +0000

GamingServer TryHackMe writeup

Gatekeeper

Fri, 01 Jan 2021 00:00:00 +0000

Gatekeeper TryHackMe writeup

Geolocating Images

Fri, 01 Jan 2021 00:00:00 +0000

Geolocating Images TryHackMe writeup

Getting Started

Fri, 01 Jan 2021 00:00:00 +0000

Getting Started TryHackMe writeup

Ghizer

Fri, 01 Jan 2021 00:00:00 +0000

Ghizer TryHackMe writeup

Git Happens

Fri, 01 Jan 2021 00:00:00 +0000

Git Happens TryHackMe writeup

Google Dorking

Fri, 01 Jan 2021 00:00:00 +0000

Google Dorking TryHackMe writeup

Gotta Catchem All

Fri, 01 Jan 2021 00:00:00 +0000

Gotta Catchem All TryHackMe writeup

GraphQL

Fri, 01 Jan 2021 00:00:00 +0000

GraphQL TryHackMe writeup

HA Joker CTF

Fri, 01 Jan 2021 00:00:00 +0000

HA Joker CTF TryHackMe writeup

HackerNote

Fri, 01 Jan 2021 00:00:00 +0000

HackerNote TryHackMe writeup

Hacking with Powershell

Fri, 01 Jan 2021 00:00:00 +0000

Hacking with Powershell TryHackMe writeup

Harder

Fri, 01 Jan 2021 00:00:00 +0000

Harder TryHackMe writeup

Hashing - Crypto 101

Fri, 01 Jan 2021 00:00:00 +0000

Hashing - Crypto 101 TryHackMe writeup

HaskHell

Fri, 01 Jan 2021 00:00:00 +0000

HaskHell TryHackMe writeup

Hc0n Christmas CTF

Fri, 01 Jan 2021 00:00:00 +0000

Hc0n Christmas CTF TryHackMe writeup

HeartBleed

Fri, 01 Jan 2021 00:00:00 +0000

HeartBleed TryHackMe writeup

History of Malware

Fri, 01 Jan 2021 00:00:00 +0000

History of Malware TryHackMe writeup

Hydra

Fri, 01 Jan 2021 00:00:00 +0000

Hydra TryHackMe writeup

Ice

Fri, 01 Jan 2021 00:00:00 +0000

Ice TryHackMe writeup

Ignite

Fri, 01 Jan 2021 00:00:00 +0000

Ignite TryHackMe writeup

Inclusion

Fri, 01 Jan 2021 00:00:00 +0000

Inclusion TryHackMe writeup

Inoculation

Fri, 01 Jan 2021 00:00:00 +0000

Inoculation TryHackMe writeup

Internal

Fri, 01 Jan 2021 00:00:00 +0000

Internal TryHackMe writeup

Intro to CTFs

Fri, 01 Jan 2021 00:00:00 +0000

Intro to Capture The Flag

This article seeks to demonstrate an efficient method for increasing your CTF abilities while also referring to useful resources, given the abundance of information available online.

One of my most enjoyable funtime is participating in CTFs. When I finally get something to work, it’s like all the parts of a jigsaw have fallen into place.

My FunTime is CtfTime

The coolest way to learn is to solve problems, hit a roadblock, google it, make some headway, hit another roadblock, seek for help, get flag, and repeat. Along the process, you will learn new things and get new abilities.

Intro to Python

Fri, 01 Jan 2021 00:00:00 +0000

Intro to Python TryHackMe writeup

Intro to x86-64

Fri, 01 Jan 2021 00:00:00 +0000

Intro to x86-64 TryHackMe writeup

Introduction to Django

Fri, 01 Jan 2021 00:00:00 +0000

Introduction to Django TryHackMe writeup

Introductory Networking

Fri, 01 Jan 2021 00:00:00 +0000

Introductory Networking TryHackMe writeup

Investigating Windows

Fri, 01 Jan 2021 00:00:00 +0000

Investigating Windows TryHackMe writeup

Iron Corp

Fri, 01 Jan 2021 00:00:00 +0000

Iron Corp TryHackMe writeup

Jack

Fri, 01 Jan 2021 00:00:00 +0000

Jack TryHackMe writeup

Jack-of-All-Trades

Fri, 01 Jan 2021 00:00:00 +0000

Jack-of-All-Trades TryHackMe writeup

Jacob the Boss

Fri, 01 Jan 2021 00:00:00 +0000

Jacob the Boss TryHackMe writeup

JavaScript Basics

Fri, 01 Jan 2021 00:00:00 +0000

JavaScript Basics TryHackMe writeup

Jeff

Fri, 01 Jan 2021 00:00:00 +0000

Jeff TryHackMe writeup

Jupyter 101

Fri, 01 Jan 2021 00:00:00 +0000

Jupyter 101 TryHackMe writeup

Jurassic Park

Fri, 01 Jan 2021 00:00:00 +0000

Jurassic Park TryHackMe writeup

Kali Machine

Fri, 01 Jan 2021 00:00:00 +0000

Kali Machine TryHackMe writeup

Kenobi

Fri, 01 Jan 2021 00:00:00 +0000

Kenobi TryHackMe writeup

Kiba

Fri, 01 Jan 2021 00:00:00 +0000

Kiba TryHackMe writeup

LazyAdmin

Fri, 01 Jan 2021 00:00:00 +0000

LazyAdmin TryHackMe writeup

LFI

Fri, 01 Jan 2021 00:00:00 +0000

LFI TryHackMe writeup

LFI Basics

Fri, 01 Jan 2021 00:00:00 +0000

LFI Basics TryHackMe writeup

Lian_Yu

Fri, 01 Jan 2021 00:00:00 +0000

Lian_Yu TryHackMe writeup

Library

Fri, 01 Jan 2021 00:00:00 +0000

Library TryHackMe writeup

Linux Challenges

Fri, 01 Jan 2021 00:00:00 +0000

Linux Challenges TryHackMe writeup

Linux Local Enumeration

Fri, 01 Jan 2021 00:00:00 +0000

Linux Local Enumeration TryHackMe writeup

Linux PrivEsc

Fri, 01 Jan 2021 00:00:00 +0000

Linux PrivEsc TryHackMe writeup

Looking Glass

Fri, 01 Jan 2021 00:00:00 +0000

Looking Glass TryHackMe writeup

Madness

Fri, 01 Jan 2021 00:00:00 +0000

Madness TryHackMe writeup

Magician

Fri, 01 Jan 2021 00:00:00 +0000

Magician TryHackMe writeup

Maintain integrity in secured areas

Fri, 01 Jan 2021 00:00:00 +0000

Introduction

What is and is not allowed in a secured area, such as a control system environment, varies from organization to organization. This section will cover some of the most common equipment do’s and don’ts.

Computers💻

In many control system environments, computers that are not needed for control system operations are not allowed in the control room. One reason for this is that email, websites, and files from home are common sources of malware(viruses,Trojan horses spyware).

Metaspliot

Fri, 01 Jan 2021 00:00:00 +0000

Metaspliot TryHackMe writeup

Methods to protect info

Fri, 01 Jan 2021 00:00:00 +0000

Introduction

Some real-life examples of poor information protection😝

SONY 2011/2014

Sony was attacked in April 2011 and then again in December 2014. They failed to implement recommended security controls. The biggest mistake Sony made that led to the PSN hacks was its organizational complexity and a lack of proper security support at the board level. It was found Sony’s data was being stored in an unencrypted format and they had also failed to use firewalls to protect networks. They were also caught using obsolete web applications. Sony said in 2011 that they were going to increase their security, but they never did.

1. PlayStation Network Finally Allows Name Changes, First One’s Free

2. Sony Has Sold Half of Its Spotify Shares

3. Case Study: Critical Controls that Sony Should Have Implemented
J.P. MORGAN 2014

In the spring of 2014, hackers stole the login credentials for one of the employees at J.P. Morgan Chase, a leading global financial services firm. Those attackers then exploited an oversight–the bank’s security had forgotten to implement two-step verification (2SV) on one of the network servers–to gain access to J.P. Morgan Chase’s corporate network.

Following that initial intrusion, the attackers moved laterally across the bank’s network, gaining access to 90 servers in total. They didn’t steal any sensitive financial information before they were detected and blocked in August, but they did succeed in making off with the names, addresses, phone numbers, email addresses, and other information of around 76 million households and approximately 7 million small businesses.

J.P. Morgan Chase didn’t report the cost of the breach. However, the bank did announce it would begin spending about $250 million annually on information security and employing 1,000 security professionals to prevent similar intrusions from happening.

How To Protect Your Business From A Data Breach | MetaCompliance

Why do most people ignore two-factor authentication? | Hacker Noon
DELOITTE 2017

Deloitte, one of the largest private firms in the U.S., which provides auditing, tax consulting, and high-end cybersecurity advice to some of the world’s biggest banks, multinational companies, media enterprises, pharmaceutical firms, and government agencies.

Deloitte, which is registered in London and has its global headquarters in New York, was the victim of a cybersecurity attack discovered in March of 2017. However it is believed the attackers may have had access to its systems since October or November 2016.

The hacker compromised the firm’s global email server through an “administrator’s account” that, in theory, gave them privileged, unrestricted “access to all areas.” The account required only a single password and did not have two-step verification, sources said.

Emails to and from Deloitte’s 244,000 staff were stored in the Azure cloud service, which was provided by Microsoft. This is Microsoft’s equivalent to Amazon Web Service and Google’s Cloud Platform.

Deloitte hit by cyber-attack revealing clients’ secret emails

Mindgames

Fri, 01 Jan 2021 00:00:00 +0000

Mindgames TryHackMe writeup

Misguided Ghosts

Fri, 01 Jan 2021 00:00:00 +0000

Misguided Ghosts TryHackMe writeup

Mnemonic

Fri, 01 Jan 2021 00:00:00 +0000

Mnemonic TryHackMe writeup

Motunui

Fri, 01 Jan 2021 00:00:00 +0000

Motunui TryHackMe writeup

Mr Robot CTF

Fri, 01 Jan 2021 00:00:00 +0000

Mr Robot CTF TryHackMe writeup

Musical Stego

Fri, 01 Jan 2021 00:00:00 +0000

Musical Stego TryHackMe writeup

Nax

Fri, 01 Jan 2021 00:00:00 +0000

Nax TryHackMe writeup

NerdHerd

Fri, 01 Jan 2021 00:00:00 +0000

NerdHerd TryHackMe writeup

Nessus

Fri, 01 Jan 2021 00:00:00 +0000

Nessus TryHackMe writeup

Network Services

Fri, 01 Jan 2021 00:00:00 +0000

Network Services TryHackMe writeup

Networking

Fri, 01 Jan 2021 00:00:00 +0000

Networking TryHackMe writeup

Ninja Skills

Fri, 01 Jan 2021 00:00:00 +0000

Ninja Skills TryHackMe writeup

NIS - Linux Part I

Fri, 01 Jan 2021 00:00:00 +0000

NIS - Linux Part I TryHackMe writeup

Nmap

Fri, 01 Jan 2021 00:00:00 +0000

Nmap TryHackMe writeup

OhSINT

Fri, 01 Jan 2021 00:00:00 +0000

OhSINT TryHackMe writeup

One Piece

Fri, 01 Jan 2021 00:00:00 +0000

One Piece TryHackMe writeup

Overpass

Fri, 01 Jan 2021 00:00:00 +0000

Overpass TryHackMe writeup

Overpass 2 - Hacked

Fri, 01 Jan 2021 00:00:00 +0000

Overpass 2 - Hacked TryHackMe writeup

OWASP Top 10

Fri, 01 Jan 2021 00:00:00 +0000

OWASP Top 10 TryHackMe writeup

OWASP ZAP

Fri, 01 Jan 2021 00:00:00 +0000

OWASP ZAP TryHackMe writeup

Peak Hill

Fri, 01 Jan 2021 00:00:00 +0000

Peak Hill TryHackMe writeup

Persistence

Fri, 01 Jan 2021 00:00:00 +0000

Persistence TryHackMe writeup

Physical protection of assets

Fri, 01 Jan 2021 00:00:00 +0000

Introduction🈂️

The traditional physical security measures of “guns, guards, and gates” are no longer enough for today’s organizations. Many control system environments have effective physical security measures in place in addition to the traditional “three Gs” listed above.

For example, additional measures could be the use of camera monitoring, electronic entryways that deny access to anyone without the proper credentials, and keypad locks. However, physical protection and control are also the responsibility of individual employees.

Pickle Rick

Fri, 01 Jan 2021 00:00:00 +0000

Pickle Rick TryHackMe writeup

Post-Exploitation Basics

Fri, 01 Jan 2021 00:00:00 +0000

Post-Exploitation Basics TryHackMe writeup

Poster

Fri, 01 Jan 2021 00:00:00 +0000

Poster TryHackMe writeup

Printer Hacking 101

Fri, 01 Jan 2021 00:00:00 +0000

Printer Hacking 101 TryHackMe writeup

PS Empire

Fri, 01 Jan 2021 00:00:00 +0000

PS Empire TryHackMe writeup

Psycho Break

Fri, 01 Jan 2021 00:00:00 +0000

Psycho Break TryHackMe writeup

Python Playground

Fri, 01 Jan 2021 00:00:00 +0000

Python Playground TryHackMe writeup

Ra

Fri, 01 Jan 2021 00:00:00 +0000

Ra TryHackMe writeup

Ra 2

Fri, 01 Jan 2021 00:00:00 +0000

Ra 2 TryHackMe writeup

Racetrack Bank

Fri, 01 Jan 2021 00:00:00 +0000

Racetrack Bank TryHackMe writeup

Recovery

Fri, 01 Jan 2021 00:00:00 +0000

Recovery TryHackMe writeup

Relevant

Fri, 01 Jan 2021 00:00:00 +0000

Relevant TryHackMe writeup

Res

Fri, 01 Jan 2021 00:00:00 +0000

Res TryHackMe writeup

Retro

Fri, 01 Jan 2021 00:00:00 +0000

Retro TryHackMe writeup

Revenge

Fri, 01 Jan 2021 00:00:00 +0000

Revenge TryHackMe writeup

Reverse Engineering

Fri, 01 Jan 2021 00:00:00 +0000

Reverse Engineering TryHackMe writeup

Reversing ELF

Fri, 01 Jan 2021 00:00:00 +0000

Reversing ELF TryHackMe writeup

RootMe

Fri, 01 Jan 2021 00:00:00 +0000

RootMe TryHackMe writeup

Scripting

Fri, 01 Jan 2021 00:00:00 +0000

Scripting TryHackMe writeup

Set

Fri, 01 Jan 2021 00:00:00 +0000

Set TryHackMe writeup

Shodan.io

Fri, 01 Jan 2021 00:00:00 +0000

Shodan.io TryHackMe writeup

Simple CTF

Fri, 01 Jan 2021 00:00:00 +0000

Simple CTF TryHackMe writeup

Skynet

Fri, 01 Jan 2021 00:00:00 +0000

Skynet TryHackMe writeup

Smag Grotto

Fri, 01 Jan 2021 00:00:00 +0000

Smag Grotto TryHackMe writeup

Source

Fri, 01 Jan 2021 00:00:00 +0000

Source TryHackMe writeup

Splunk

Fri, 01 Jan 2021 00:00:00 +0000

Splunk TryHackMe writeup

Spring

Fri, 01 Jan 2021 00:00:00 +0000

Spring TryHackMe writeup

SSRF

Fri, 01 Jan 2021 00:00:00 +0000

SSRF TryHackMe writeup

Starting Out In Cyber Sec

Fri, 01 Jan 2021 00:00:00 +0000

Starting Out In Cyber Sec TryHackMe writeup

Startup

Fri, 01 Jan 2021 00:00:00 +0000

Startup TryHackMe writeup

Steel Mountain

Fri, 01 Jan 2021 00:00:00 +0000

Steel Mountain TryHackMe writeup

StuxCTF

Fri, 01 Jan 2021 00:00:00 +0000

StuxCTF TryHackMe writeup

Sublist3r

Fri, 01 Jan 2021 00:00:00 +0000

Sublist3r TryHackMe writeup

Sudo Buffer Overflow

Fri, 01 Jan 2021 00:00:00 +0000

Sudo Buffer Overflow TryHackMe writeup

Sudo Security Bypass

Fri, 01 Jan 2021 00:00:00 +0000

Sudo Security Bypass TryHackMe writeup

Symfonos6

Fri, 01 Jan 2021 00:00:00 +0000

Symfonos6 TryHackMe writeup

Tartarus

Fri, 01 Jan 2021 00:00:00 +0000

Tartarus TryHackMe writeup

Tempus Fugit Durius

Fri, 01 Jan 2021 00:00:00 +0000

Tempus Fugit Durius TryHackMe writeup

The Blob Blog

Fri, 01 Jan 2021 00:00:00 +0000

The Blob Blog TryHackMe writeup

The Docker Rodeo

Fri, 01 Jan 2021 00:00:00 +0000

The Docker Rodeo TryHackMe writeup

The find command

Fri, 01 Jan 2021 00:00:00 +0000

The find command TryHackMe writeup

The Impossible Challenge

Fri, 01 Jan 2021 00:00:00 +0000

The Impossible Challenge TryHackMe writeup

The Marketplace

Fri, 01 Jan 2021 00:00:00 +0000

The Marketplace TryHackMe writeup

The Server From Hell

Fri, 01 Jan 2021 00:00:00 +0000

The Server From Hell TryHackMe writeup

Thompson

Fri, 01 Jan 2021 00:00:00 +0000

Thompson TryHackMe writeup

Tmux

Fri, 01 Jan 2021 00:00:00 +0000

Tmux TryHackMe writeup

Tomghost

Fri, 01 Jan 2021 00:00:00 +0000

Tomghost TryHackMe writeup

Tony the Tiger

Fri, 01 Jan 2021 00:00:00 +0000

Tony the Tiger TryHackMe writeup

ToolsRus

Fri, 01 Jan 2021 00:00:00 +0000

ToolsRus TryHackMe writeup

Tor

Fri, 01 Jan 2021 00:00:00 +0000

Tor TryHackMe writeup

Tutorial

Fri, 01 Jan 2021 00:00:00 +0000

Tutorial TryHackMe writeup

Undiscovered

Fri, 01 Jan 2021 00:00:00 +0000

Undiscovered TryHackMe writeup

Upload Vulnerabilities

Fri, 01 Jan 2021 00:00:00 +0000

Upload Vulnerabilities TryHackMe writeup

Web Fundamentals

Fri, 01 Jan 2021 00:00:00 +0000

Web Fundamentals TryHackMe writeup

Web Scanning

Fri, 01 Jan 2021 00:00:00 +0000

Web Scanning TryHackMe writeup

WebAppSec 101

Fri, 01 Jan 2021 00:00:00 +0000

WebAppSec 101 TryHackMe writeup

Wgel CTF

Fri, 01 Jan 2021 00:00:00 +0000

Wgel CTF TryHackMe writeup

Willow

Fri, 01 Jan 2021 00:00:00 +0000

Willow TryHackMe writeup

Windows PrivEsc Arena

Fri, 01 Jan 2021 00:00:00 +0000

Windows PrivEsc Arena TryHackMe writeup

Wireshark 101

Fri, 01 Jan 2021 00:00:00 +0000

Wireshark 101 TryHackMe writeup

Wonderland

Fri, 01 Jan 2021 00:00:00 +0000

Wonderland TryHackMe writeup

WWBuddy

Fri, 01 Jan 2021 00:00:00 +0000

WWBuddy TryHackMe writeup

XXE

Fri, 01 Jan 2021 00:00:00 +0000

XXE TryHackMe writeup

Year of the Dog

Fri, 01 Jan 2021 00:00:00 +0000

Year of the Dog TryHackMe writeup

Year of the Fox

Fri, 01 Jan 2021 00:00:00 +0000

Year of the Fox TryHackMe writeup

Year of the Pig

Fri, 01 Jan 2021 00:00:00 +0000

Year of the Pig TryHackMe writeup

Year of the Rabbit

Fri, 01 Jan 2021 00:00:00 +0000

Year of the Rabbit TryHackMe writeup

Zero Logon

Fri, 01 Jan 2021 00:00:00 +0000

Zero Logon TryHackMe writeup

SneakyMailer

Sat, 28 Nov 2020 13:47:00 +0000

SneakyMailer HackTheBox writeup

Buff

Fri, 20 Nov 2020 21:08:00 +0000

Buff HackTheBox writeup

Tabby

Sat, 07 Nov 2020 17:30:00 +0000

Tabby HackTheBox writeup

Dyplesher

Sat, 24 Oct 2020 14:01:00 +0000

Dyplesher HackTheBox writeup

Blunder

Sat, 17 Oct 2020 17:01:00 +0000

Blunder HackTheBox writeup

Cache

Sat, 10 Oct 2020 19:09:00 +0000

Cache HackTheBox writeup

Blackfield

Sat, 03 Oct 2020 16:30:00 +0000

Blackfield HackTheBox writeup

Admirer

Sat, 26 Sep 2020 20:00:00 +0000

Admirer HackTheBox writeup

Travel

Tue, 15 Sep 2020 00:00:00 +0000

Travel HackTheBox writeup

Blue

Mon, 14 Sep 2020 17:23:00 +0000

Blue TryHackMe writeup - Windows machine vulnerable to MS17-010 EternalBlue exploit

Magic

Fri, 21 Aug 2020 00:00:00 +0000

Magic HackTheBox writeup

Traceback

Sat, 15 Aug 2020 00:00:00 +0000

Traceback HackTheBox writeup

Fatty

Sat, 08 Aug 2020 00:00:00 +0000

Fatty HackTheBox writeup

Oouch

Fri, 31 Jul 2020 00:00:00 +0000

Oouch HackTheBox writeup

Book

Sat, 11 Jul 2020 00:00:00 +0000

Book HackTheBox writeup

ForwardSlash

Sun, 05 Jul 2020 00:00:00 +0000

ForwardSlash HackTheBox writeup

ServMon

Sat, 20 Jun 2020 00:00:00 +0000

ServMon HackTheBox writeup

Monteverde

Thu, 11 Jun 2020 00:00:00 +0000

Monteverde HackTheBox writeup

Nest

Fri, 05 Jun 2020 00:00:00 +0000

Nest HackTheBox writeup

Resolute

Fri, 29 May 2020 00:00:00 +0000

Resolute HackTheBox writeup

Obscurity

Sat, 09 May 2020 00:00:00 +0000

Obscurity HackTheBox writeup

OpenAdmin

Fri, 01 May 2020 00:00:00 +0000

OpenAdmin HackTheBox writeup

Control

Sat, 25 Apr 2020 00:00:00 +0000

Control HackTheBox writeup

Mango

Sat, 18 Apr 2020 00:00:00 +0000

Mango HackTheBox writeup

Traverxec

Sun, 12 Apr 2020 00:00:00 +0000

Traverxec HackTheBox writeup

Canape

Sat, 13 Jul 2019 00:00:00 +0000

Canape HackTheBox writeup

About

Mon, 01 Jan 0001 00:00:00 +0000

Security engineer, eBPF researcher, and purple teamer

Contact

Mon, 01 Jan 0001 00:00:00 +0000

How to get in touch

CyFun - Security Research on CyFun

CVE-2025-32324: Android ActivityManagerShellCommand Authentication Bypass Leading to LaunchAnyWhere

eBPF JIT Compiler Internals: Understanding Constant Blinding Implementation

How Attackers Are Weaponizing OAuth to Silently Take Over Microsoft Outlook Accounts

Novel approach to tackle UAF Bugs in the Linux Kernel

Geoguessr Tips & Tricks

Tenet

ScriptKiddie

Delivery

Ready

Laboratory

Passage

Academy

Jewel

Doctor

Omni

Worker

0day

About

About this category

Active Directory Basics

Advent of Cyber

Advent of Cyber 2

Adventure Time

Agent Sudo

Alfred

Anonforce

Anonymous

Anonymous Playground

Anthem

Aster

AttackerKB

Attacking ICS Plant 1

Attacking Kerberos

Attacktive Directory

Authenticate

Avengers Blog

Basic Malware RE

BasicPentesting

Binex

Biohazard

Blog

Blueprint

Boiler CTF

Bolt

Borderlands

Bounty Hacker

Brainstorm

Break it

Break Out The Cage

Brooklyn Nine Nine

Brute It

Buffer Overflow Prep

Burp Suite

C4ptur3-th3-fl4g

Carpe Diem 1

CC Steganography

CherryBlossom

Cicada-3301 Vol.1

CMesS

Common info collection technique

Introduction ⭐

>Who are these adversaries?

Social Engineering👪

Phishing

Common Linux Privesc

ConvertMyVideo

Crack the hash

Cross-site Scripting

CTF collection Vol.1

Cybersecurity practices and why they are important

Cybersecurity Practices

CySec Practices for ICS

Learning Objectives

Focus on the few things like

Daily Bugle

Dav

Daves Blog

Develpy

Dogcat